vbc.exe -a "C:\Users\test22\AppData\Local\Temp\unk.xml"
2088cmd.exe "cmd" /c mkdir "C:\Users\test22\AppData\Roaming\tewu"
2132cmd.exe "cmd" /c schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'C:\Users\test22\AppData\Roaming\tewu\tewu.exe'" /f
2172schtasks.exe schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'C:\Users\test22\AppData\Roaming\tewu\tewu.exe'" /f
2308cmd.exe "cmd" /c copy "C:\Users\test22\AppData\Local\Temp\pganjz.exe" "C:\Users\test22\AppData\Roaming\tewu\tewu.exe"
2228